{"id":"GHSA-63cr-xg3f-8jvr","aliases":[],"url":"https://o3.security/vulnerability/GHSA-63cr-xg3f-8jvr","summary":"Leantime allows Stored Cross-Site Scripting (XSS)","details":"### Summary\nStored XSS, also known as persistent XSS, is the more damaging of the two. It occurs when a malicious script is injected directly into a vulnerable web application. \n\n### Details\nA Stored Cross-Site Scripting (XSS) vulnerability was found that could potentially compromise user data and pose a significant security risk to the platform.\n\n### PoC\n\n- Create a project\n- Navigate to project\n- Visit to the integration\n- Add malicious payload inside the webhook and save it.\n- Notice the alert dialogue indicating successful execution of the XSS payload.\n```\n'';!--\" onfocus=alert(0) autofocus=\"\"  onload=alert(3);=\"&{(alert(1))}\" |=\"\" mufazmi\"=\"\n```\n```\n'';!--\" onfocus=alert(0) autofocus=\"\"  onload=alert(3);=>>\"&{(alert(1))}\" |=\"\">> mufazmi\"=\">>\n```\n### POC\nhttps://youtu.be/kqKFgsOqstg\n\n\n### Impact\nThis XSS vulnerability allows an attacker to execute malicious scripts in the context of a victim's browser when they click on a specially crafted link. This could lead to various malicious activities, including session hijacking, stealing sensitive information such as cookies or login credentials, and potentially compromising the entire platform's security.","published":"2025-02-21T22:15:52Z","modified":"2025-02-21T22:35:45.762491Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"leantime/leantime","fixedVersion":null}],"fix":null,"references":[{"type":"WEB","url":"https://github.com/Leantime/leantime/security/advisories/GHSA-63cr-xg3f-8jvr"},{"type":"PACKAGE","url":"https://github.com/Leantime/leantime"},{"type":"WEB","url":"https://youtu.be/kqKFgsOqstg"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2025-02-21T22:35:45.762491Z"}}